WORLD rNTELLECTUAL PROPER 
International But* 



PCX 

INTERNATIONAL APPLICATION PUBLISHED UNDER 




wo 



9606499A2 



(51) IntemaUonal Patent Classlflcation ^ : 
* H04N 



A2 



(11) Inlfmatlonal Publication Number: WO 96/06499 

(43) International Publication Date: 29 February 1996 (29.02.96) 



(21) International Application Number: PCT/IB95/(X)601 

(22) International Filing DaU: 2 August 1995 (02.08.95) 



(30) Priority DaU: 
9416040.5 



9 August 1994 (09.08.94) 



GB 



(71) Applicant: PHILIPS ELECTRONICS N.V. [NLVNLJ; Groc- 
newoudscweg I, NL-562I BA Eindhoven (NL). 

(71) Applicant (for SE only): PHILIPS NORDEN AB [SE/SE]; 
Konbygatan 5, Kista. S- 1 6485 SioclOiolm (SE). 

(71) Applicant (for GB oniy): PHILIPS ELECTRONIS UK LIM- 

ITED (GB/GB); 420-430 London Road, Croydon CR9 3QR 
(GB). 

(72) Inventor: GIBSON, Rodney, William; Fcmdale House, 66 

Fcmdalc Road, Burgess Hill. Sussex (GB). 

(74) Agent: MOODY. Colin. James; Intemationaal Octrooiburcau 
B.V.. P.O. Box 220. 5600 A£ Eindhoven (NL). 



(81) Designated Sutes: JP. KR. European patent (AT, BE, CH, DE. 
DK. ES. FR. GB. GR. IE. IT. LU. MC. NL. PT. SE). 



Published 

Without international search report and to he republished 
upon receipt of that report. 



(54) TiUe: METHOD OF, AND SYSTEM FOR. TRAJ^SFERRING SECURE DATA 




(57) Abstract 

A method of transferring secure data in a remote control system comprising a remote controller (12) and an apparatus (10) which is 
operable in response to commands relayed by way of the remote controller. The apparanjs has a receiver (38) for receiving transmissions 
from the remote controller (12). the information from the said transmissions being stored in a storage device (42). The remote conn^oller 
has a transmitter (26). a memory (22) for storing secure data and commands and a keypad (24). The transmitter (26) is controlled so that 
in response to a user wishing to transfer secure data to the user apparatus (10) it transmits this data at a power level lower than is normally 
used for sending other commans. The link bcrwcen the remote controller (12) and the user apparatus (10) may be wireless or infra-red. 
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DESCRIPTION 



METHOD OF, AND SYSTEM FOR, TRANSFERRING SECURE DATA 



Technical Field 

The present invention relates to a method of. and system for, 
transferring secure data. The present Invention has particular, but not 
exclusive, application to the use of a remote controller for controlling a user 
apparatus such as a TV receiver audio equipment and other items such as 
dorhestic appliances and/or office equipment. 



Background Art 

The use of infra-red remote controllers to control TV receivers and 
audio equipment is well known. A drawback which sometimes occurs in 
using infra-red controllers is that there is risk of cross-coupling, for example 
when a TV set remote controller sends commands to the TV receiver, which 
commands are picked up by other apparatus in the room causing it or them 
to be switched on unintentionally. 

Remote controlled locking and unlocking of cars using infra-red 
radiation is well known, but has the disadvantage that a person equipped with 
what is termed "an electronic grabber" Is able to detect the transmitted signal 
and to store it for unauthorised re-use later. 

It is also known to use wireless remote controllers to operate remote 
apparatus having a radio receiver built into them, but drawbacks to such 
controllers are easy interception and the possibility of cross-coupling and 
spoofing, that is commands going to the wrong apparatus or being 
deliberately inserted by unauthorised parties. One method to avoid these 
problems is by the use of security coding, but this in turn gives a need to set 
up keys and authorisations. Such a task is not looked up as being a problem 
to technically adept people who may use PCs and be able to program video 
recorders, however entering such security data may represent a significant 
problem to unsophisticated users of electronic equipment. 
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Disclosure of Invention 

An object of the present invention is to enter security data into a user 
apparatus in a simple but secure manner. 

According to one aspect of the present invention there is provided a 
method of transferring secure data between a remote controller and an 
apparatus to be controlled by said controller, comprising positioning the 
remote controller and the apparatus close to each other and transferring the 
secure data at a power level lower than that normally used for transrnitting 
commands by the remote controller 

According to a second aspect of the present invention there is 
provided a remote control system comprising a remote controller and an 
apparatus which is operable in response to commands relayed by way of the 
remote controller, the apparatus having means for receiving transmissions 
from the remote controller and storage means for storing secure data, and 
the remote controller having transmitting means, means for storing secure 
data and commands and a keypad, the transmitting means being responsive 
to the actuation of a key or combination of keys commanding the transfer of 
secure data, for transmitting said secure data at a power level lower than is 
used for sending other commands. 

By means of the present invention a user can place a remote controller 
adjacent to and spaced from the user apparatus and by actuation of a key 
can transfer the data at a very low power. Since the power used to transmit 
the data is very low then it would be difficult for a "grabber" to detect the data 
being transferred. If desired communications between the remote controller 
and/or the user apparatus may be by way of radio or infra-red radiation. 

Although the secure data, which may include security coding, may be 
held in the user apparatus or the remote controller, the security data being 
transmitted to the other device during the setting up procedure, an advantage 
for having it stored in the remote controller is that the same security data can 
be downloaded into several different pieces of apparatus. 

If desired the remote controller may be used to link several pieces of 
apparatus in a secure manner by picking up data, for example sub-system 
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addresses, and transferring the data to one or more apparatus which are to 
be linked. 

In some cases it may be desirable to ensure that an authorised person 
was operating the remote controller. In such an arrangement, a personal 
5 identity number (PIN) could be used to authorise the transaction. For extra 

security if the PIN is transmitted it may be encoded, using pre-set coding 
and/or a code set up at the commencement of the operation to transfer the 
secure data. 

In order to increase the overall security of the device the security data 
10 may be encoded using a pseudo-random code which is automatically 

changed in a predetermined way so that the same information is never sent 
twice. The pseudo-random code in the apparatus is changed by the same 
algorithm as that used in the remote controller. As a result, an unauthorised 
person who is able to detect the transmissions cannot gain access by re- 
15 using the format of the information transmitted. The code keys and any other 

secret information used by these algorithms are transferred using the method 
in accordance with the present invention. 

Brief Description of Drawings 
20 The present invention will now be described, by way of example, with 

reference to the accompanying drawings, wherein: 

Figure 1 is a block schematic diagram of a wireless remote controller 
and a TV receiver, 

Figure 2 is simplified version of the drawing shown in Figure 1 wherein 
25 the remote controller is an infra-red remote controller and transmissions from 

the apparatus to the remote controller are also by way of infra-red radiation, 

Figure 3 is a flow chart relating to the transmission of security data by 
low power, and 

Figure 4 is a flow chart relating to recognising a new equipment. 
30 In the drawings the same reference numerals have been used to 

indicate corresponding features. 
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Modes for Carrying Out the Invention 

The arrangennent shown in Figure 1 comprises a user apparatus in the 
fornn of a TV receiver 10 and a wireless remote controller 12. The TV 
receiver 10 comprises a display device such as a cathode ray tube 14 to 
which is connected the usual television receiver circuitry 16 which is known 
per se and forms no part of the present invention. As is customary the 
circuitry 16 is connected to an antenna 18. 

The remote controller 12 comprises a microprocessor 20 to which is 
connected a read-only memory (ROM) 22 which stores security data such as 
coding. A keypad 24 is connected to the microprocessor 20 and serves as 
a man-machine interface. A radio transmitter 26 is provided and has an input 
connected to the microprocessor 20 and an output coupled to an antenna 30. 
A receiver 32, which may be optional, is connected between the antenna 30 
and the microprocessor 20. 

Inside the TV receiver 10, an antenna 36 is connected to a radio 
receiver 38 having an output connected to a microprocessor 40. A non- 
volatile ROM 42, for example an EPROM, is connected to the microprocessor 
40 and serves to store security data relayed from the remote controller 12. 
Optionally a transmitter 44 is connected to an output of the microprocessor 
40 and the antenna 36. 

The frequency of operation of the transmitter 26 depends on that 
approved by the radio regulatory authorities but a frequency of the order of 
400MHz is considered suitable. The transmitter 26 is able to operate in a 
very low power mode, of the order of microwatts or picowatts, when relaying 
security data from the remote controller 12 to the receiver 38. In order to do 
this, the remote controller has to be held close to the antenna 36 and 
separated by a space of. say, 10cm and by pressing a predetermined button 
or sequence of buttons on the remote controller 12, the remote controller 
transmits at low power to the receiver 38 to introduce itself. The information 
sent to the receiver 38 for ultimate storage in the ROM 42 includes an 
identity code and keys or algorithms for use as security codes in subsequent 
transactions at normal power. This operation could form an authorisation 
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process in which the TV receiver 10 becomes aware of the identity of the 
remote controller 12 and thereafter obeys its commands. An additional level 
of security can be provided by the remote controller storing a personal 
identity number (PIN) which can be used either to authorise transmission of 
5 secure data or as part of the transactions of not only transferring security 

data at low power but also in the normal channel changing and other 
adjustments that user may want to effect. In its most elementary form the 
remote controller 12 does not include the receiver 32 and likewise the TV 
receiver 10 does not include the transmitter 44. By omitting these items the 

10 signalling is essentially one way from the remote controller to the TV 

receiver. However, by including the receiver 32 and the transmitter 44 
infot-mation may be exchanged between the remote controller and the TV 
receiver and/or other equipment which are to be linked, for example 
acknowledgements may be provided to transmissions originating from the 

15 remote controller. Such acknowledgements will also conform to the protocol 

applying so that transmissions at the normal, higher, power do not reveal 
unwanted information which can be used by an unauthorised third party or 
another interfering apparatus. In the case of linking equipments, the remote 
controller 12 is able to pick-up secure data from one piece of apparatus and 

20 transfer the data at low power to one or more other pieces of apparatus, for 

example to link sub-system addresses in a secure manner. 

Figure 2 is a simplified version of Figure 1 and Illustrates that 
communication between the remote controller 12 and the TV receiver 10 is 
via an infra-red link, the remote controller 12 having an infra-red emitter 50 

25 and the TV receiver an infra-red detector 52. In order to be able to provide 

linking facilities and/or acknowledgements the TV receiver 10 further 
comprises an Infra-red emitter 54 and the remote controller an infra-red 
detector 56. A disadvantage of using infra-red transmissions over and above 
wireless transmissions is that the detector 52 and emitter 54 have to be 

30 disposed on the front of the TV receiver 10 whereas in the Figure 1 

arrangement the antenna 36 can be placed at the rear of the apparatus and 
the associated circuitry located in the relatively large space surrounding the 
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neck of the display tube 14. 

Figure 3 is a flow chart relating to the sequence of operations 
associated with transmitting secure data at low power from a remote 
controller programmed with a PIN. The flow chart commences with a 
terminator block 60. The block 62 relates to actuating the keypad of the 
remote controller to key in inputs for transferring data. The block 64 relates 
to the microprocessor 20 (Figure 1) recognising the commands in the data 
being transferred. Block 66 relates to checking to see if the command relates 
to the transfer of secure data. If the answer is No (N) then the required data 
' is transmitted by the remote controller at normal power. This is indicated by 
block 68. If the answer to block 66 is Yes (Y) then in block 70 the question 
is asked "Is a PIN required?". If the answer is Yes (Y) then block 72 relates 
to a user entering his PIN and in block 74 a check is made to see if the PIN 
is recognised. If the answer is No (N) then the flow chart reverts to the 
block 62. Alternatively, if the answer is Yes (Y). then the flow chart proceeds 
to the block 76 which also is connected to the No (N) output of the block 70. 
The block 76 relates to transmitting secure data and, optionally the PIN, at 
low power. 

Althoijgh an in-range detector may be provided, a more elementary 
way of checking that the data has been transferred is to send a normal power 
command and see if the TV receiver (or other user equipment) responds as 
required. In the event of the secure data not having been received then the 
user re-tries with the remote controller positioned closer to the antenna or 
detector of the receiving equipment. 

Figure 4 relates to a flow chart in respect of a user equipment such as 
the TV receiver 10 (Figure 1) receiving low power transmissions from a 
remote controller and having the ability to respond to enquiries made by the 
remote controller. Block 82 refers to switching the TV receiver on. Block 84 
relates to the equipment responding by transmitting the equipment details 
which may include a code identifying the manufacturer, the type of 
equipment, for example TV receiver, hi-fi equipment, and a type number. In 
block 86 the TV receiver receives the system identification code, which 
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; ensures that the transmission was intended for the TV receiver, transmitted 

by the remote controller which is followed by receiving additional secure data 
such as security coding, algorithms and so forth, block 88. Block 90 refers 
to storing the secure data, for example in the ROM 42 (Figure 1). Finally. 
5 block 92 relates to the TV receiver waiting to receive commands at normal 

power level from the remote controller. 

By means of the present invention one remote controller can be used 
to operate several pieces of equipment which form parts of a home system^ 
network or in an office environment. Additionally, by means of the creation 

10 of a network of equipment and the use of security coding, equipment can 

"talk" to each other without additional commands from the remote controller. 

Although the present invention envisages a wireless or infra-red link 
between the remote controller and the user apparatus, other known forms of 
communication, such as ultrasonics, or ohmic contact may be used for the 

15 transfer of secure information. In the case of using ohmic contact then 

either a special connector can be provided between the remote controller and 
the user apparatus or the user apparatus has a storage compartment for 
receiving the remote controller, the storage compartment and the remote 
controller having complementary electrical contacts which mate when the 

20 remote controller is inserted into the storage compartment. 

From reading the present disclosure, other variations and modifications 
wilt be apparent to persons skilled in the art. Such variations and 
modifications may involve equivalent and other features which are already 
known in the design, manufacture and use of remote control systems and 

25 component parts thereof, and which may be used instead of or in addition to 

features already described herein. Although claims have been formulated in 
this Application to particular combinations of features, it should be understood 
that the scope of the disclosure of the present invention also includes any 
novel feature or any novel combination of features disclosed herein either 

30 explicitly or implicitly or any generalisation thereof, whether or not it relates 

to the same invention as presently claimed in any claim and whether or not 
it mitigates any or all of the same technical problems as does the present 
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invention. The Applicants hereby give notice that new claims may be 
formulated to such features and/or combinations of such features during the 
prosecution of the present Application or of any further Application derived 
therefrom. 

Industrial Applicability 

Remote control of equipment or groups of equipments. 
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CLAIMS 

1. A method of transferring secure data between a remote 
controller and an apparatus to be controlled by said controller, comprising 
5 positioning the remote controller and the apparatus close to each other and 

transferring the secure data at a power level lower than that normally used 
for transmitting commands by the remote controller. 

2 A method as claimed in claim 1 . characterised in that the secure 
10 data comprises an algorithm for changing the code which is transmitted as 

part of a command. 

3. A method as claimed in claim 1 or 2, characterised in that the 
secure data is transferred by radio. 

15 

4. A method as claimed in any one of claims 1 to 3, characterised 
in that the secure data is held by the remote controller, in that a personal 
identification number (PIN) is assigned to the remote controller and in that the 
PIN is used to authorise the transaction for transferring the secure data. 

20 

5. A method as claimed in claim 4. characterised in that the 
apparatus communicates with the remote controller by the same type of link 
as is used to transfer the secure data. 

25 6. A method as claimed in claim 5. characterised in that the 

remote controller is able to receive data from one piece of apparatus and 
able to transfer the said data to at least one other piece of apparatus. 

7. A remote control system comprising a remote controller and an 
30 apparatus which is operable in response to commands relayed by way of the 

remote controller, the apparatus having means for receiving transmissions 
from the remote controller and storage means for storing secure data, and 
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the remote controller having transmitting means, means for storing secure 
data and commands and a keypad, the transmitting means being responsive 
to the actuation of a key or combination of keys for commanding the transfer 
of secure data, for transmitting said secure data at a power level lower than 
5 is normally used for sending other commands. 

8. A system as claimed in claim 7, characterised in that the 
transmitting and receiving means are radio transmitting and receiving means. 

10 9. A system as claimed in claim 7 or 8, characterised in that the 

remote controller has means for storing a PIN number and the apparatus has 
means for storing the PIN number when received as part of the transaction 
for transferring the secure data. 

15 10. A system as claimed in claim 7, 8 or 9, characterised in that the 

apparatus comprises transmitting means and the remote controller comprises 
receiving means, whereby data can be communicated to the remote 
controller by the apparatus. . 
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